CREST Certified Simulated Attack Manager

The CREST Certified Simulated Attack Manager (CC SAM) examination tests candidates’ knowledge and expertise in leading a team that specialises in Simulated Attacks. The candidate is expected to have a good breadth of knowledge in all areas of Simulated Attack and proven experience in managing incidents, penetration tests and simulated attack exercises. The exam will assess the candidate’s ability to conduct Simulated Attacks in a realistic, legal and safe manner, ensuring appropriate evidence is collated to provide the customer with actionable intelligence of organisational risks and failings while minimising the risks to the customer’s staff, data and systems.

Examination Format
The CC SAM examination is delivered in Pearson Vue centres.  It is divided into two parts (SAM1 and SAM2).  Part One must be taken before Part Two and overall result will be released once both examination Parts have been taken (ie. there will be no result given after taking part 1).

  • SAM 1 will comprise multiple-choice questions and one compulsory long form question
  • SAM 2 will comprise two long form questions and a scenario-based question.

You can download the following documents from the links below:

Syllabus for the CC SAM examination
Notes for Candidates to aid examination preparation

The Certified Simulated Attack Manager examination costs £1,600 + VAT.

The CC SAM examination is booked directly with Pearson Vue and the fee is paid directly to Pearson Vue at the time of booking SAM 1.

Recommended Preparation Material
The following material and media has been cited as helpful preparation for this examination by previous candidates:

Reading Material:
Targeted Cyber Attack (by Aditya Sood/Richard Enbody)

Useful Information for Candidates

Details of the Logistics and Timings of CREST examinations can be found in the Examination Preparation pages for your country of choice
CREST’s Policy for Candidates requiring special arrangements including additional time to accommodate a medical condition (including examinations delivered via Pearson Vue)
Terms and Conditions for CREST Examinations (includes hard disk drive wiping policy)

You can read the CREST Privacy Policy on our website regarding personal data we hold.